Re: virtual_server_group does that do what I think is does?

Hello Mike,

On Wednesday 23 July 2014 16:19:29 Mike Williams wrote:
> Sorry if this is the wrong place for idiot user questions, there isn't a
> keepalived-users list and other people seem to be asking user-type 
questions
> here.

That's fine, I think. The list is not exactly high volume anyway :)

> One particular point confusing me no end is virtual_server_group.
> It seems like a slam dunk feature, but my puny brain can't grasp how 
to
> actually use it.
> 
> We've got multiple virtuals pointing at a set of reals. In one case 18
> separate virtuals against the same set of reals (and many more to 
come). It
> would be extremely useful to reduce 18 checks to 1.

I have no direct answer regarding virtual_server_group, as I never felt 
the need to use that.

However, my balancers run several hundred "outside" VIPs against the 
same set of servers, so I'm in the same place you are. The solution I 
use, exclusively, is to define a single _firewall mark_ based 
virtual_server (for a given set of realservers - different set, different 
mark), and then use iptables -t mangle PREROUTING matches to set 
the firewall marks for any traffic that needs them.
Together with configuring the VIP (networks) on loopback, this works out 
very
nicely.

> Also, on a separate note, can any of the xx_GET/xx_CHECK variables 
be
> defined globally?
> The config ends up unnecessarily long having to define "url { path ...;
> status_code ...; digest ...; }" over and over and over again.

I don't think that is possible.

The usual solution here, is some homegrown _generator_ for 
keepalived.conf. Unfortunately, mine is pretty idiosyncratic, 
undocumented, and not fit for sharing...

best regards
  Patrick

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds

_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel